Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

CVE-2026-3891

CVE-2026-3891 This tool was created solely for educational purposes, not for criminal activities or anything of the sort. Do not misuse this tool. Good luck trying it out...

CVE-2026-3891

此存储库没有 README。...

Mass-Scanner-CVE-2026-3891

批量扫描器 CVE-2026-3891 一个简洁且动态的 GitHub 展示页面，用于介绍基于 Python 的批量扫描器 CVE-2026-3891，其重点是在受控环境中验证特定的 WordPress AJAX 行为。 本仓库严格仅用于授权安全测试、内部审计、实验室环境及防御性研究 。 概述 本项目旨在帮助防御者和研究人员，在他们拥有、管理或明确获准评估的环境中，审查特定的 WordPress AJAX 相关行为。 其设计用途包括： 内部验证 安全研究 受控测试 实验室环境复现 防御性评估工作流 存在原因...

Exploit for CVE-2026-3891

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit 🛡️ Descri...

CVE-2026-3891

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

WordPress Unauthenticated RCE via Pix for WooCommerce plugin

This Metasploit module exploits an Unauthenticated Arbitrary File Upload vulnerability in the Pix for WooCommerce plugin for WordPress. Attackers can leverage the missing capability check and insufficient file type validation in the 'lknpixforwoocommercec6savesettings' function to upload arbitrar...